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(57) Abstract: The invention provides a method of performing online switching of software from executing a first version of oper- 
ating software to executing a second version of operating software in a communication system (100). The system (100) incorporates 
connection gateways (130, 200) controllable using the software for routing and processing communication traffic flowing between 
subscribers connected to the system (100) in response to subscriber demand. The method includes the steps of: providing the sys- 
tem (100) with its gateways executing the first version of the software; receiving the second version of software at the gateways; 
receiving an instruction at the gateways to perform an online switch of software; storing persistent data describing at least routing 
connections established through the gateways; transferring control of the gateways from the first version of software to Mini Media 
Handler (MMH) software executing in the gateways and operable to maintain established routing connections through the gateways; 
executing the second version of software concurrently with the MMH software to enabling the second version to recover the persis- 
tent data and configure itself in response thereto; and passing control of the gateways from the MMH software to the second version 
of software. The invention provides the advantage that the gateways can be switched from executing the first version of software to 
executing the second version of software without causing an interruption of communication traffic conveyed through the gateways. 
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For two-letter codes and other abbreviations, refer to the "Guid- 
ance Notes on Codes and Abbreviations" appearing at the begin- 
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METHOD AND GATEWAY FOR PERFORMING ONLINE SWITCHING OF SOFTWARE IN A 

COMMUNICATION SYSTEM 

The present invention relates to a method of performing online switching of software in a 
communication system, in particular, but not exclusively, to a method of switching in a 
communication system including software controlled connection gateways from an earlier 
software build to a later software build whilst the system is in operation conveying 
5 communication traffic; the invention further relates to a communication system and a 
connection gateway operating according to the method. 

Conventional communication systems vary in size and complexity. Larger systems have 
associated therewith numerous subscribers and are capable of routing data along 
10 communication paths connecting the subscribers in response to subscriber demand. The 
paths are established under software control through units known as connection gateways. 
Such gateways perform routing functions as well as other functions such as data filtration, 
data reformatting and data encryption or decryption. 

15 When upgrading software in the conventional systems, connection gateways therein 
executing current versions of software are interrupted or momentarily powered down and 
then new versions of software are loaded into them and subsequently executed. Such 
interruption or powerdown causes interruption of services provided in the systems and 
potential loss of established communication paths therein. Moreover, such interruption or 

20 powerdown can potentially appear as system unreliability to subscribers. 
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The inventors have appreciated that it is desirable to perform online switching between 
versions of software in communications systems including connection gateways without 
causing interruption of established communication paths for communication traffic through 
the systems. 

5 

According to a first aspect of the present invention, there is provided a method of 
performing online switching of software from executing a first version of operating 
software to executing a second version of operating software in a communication system, 
the system incorporating connecting means controllable using the software for routing and 
10 processing communication traffic flowing between subscribers connected to the system in 
response to subscriber demand, the method characterised in that it includes the steps of: 

(a) providing the system with its connecting means executing the first version of the 
software; 

1 5 (b) receiving the second version of software at the connecting means; 

(c) receiving an instruction at the connecting means to perform an online switch of 
software; 

(d) storing persistent data describing at least routing connections established through 
the connecting means; 

20 (e) transferring control of the connecting means from the first version of software to 
interfacing software executing in the connecting means and operable to maintain 
established routing connections through the connecting means; 
(f) executing the second version of software concurrently with the interfacing software 
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to enabling the second version to recover the persistent data and configure itself in 
response thereto; and 

(g) passing control of the connecting means from the interfacing software to the second 
version of software. 

5 

The invention provides the advantage that the connecting means is capable of being 
switched from executing the first version of software to executing the second version of 
software without causing an interruption of communication traffic conveyed through the 
connecting means. 

10 

The method involves invoking the interfacing software which is advantageously included in 
the first version of software, the interfacing software operable to control the connecting 
means without support from other parts of the first version of software. Thus, the 
interfacing software maintains operation of the connecting means when execution of other 
15 parts of the first version of software is terminated. 

Persistent data is defined as being data, which includes one or more of: 

a record of the state of the connecting means at an instance when the persistent data 
is stored; 

a record of the manner in which the connecting means is included into the system; 
licensing data relating to subscribers and users of the system; 
a record of all established connections and associated processing functions through 



(a) 

(b) 
(c) 
(d) 
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the connecting means; and 
(e) states of software objects running in the connecting means when the persistent data 

is stored. 

5 In order to reduce the size and complexity of the persistent data, the first version of 
software, after step (c) of the method, is operable to render the connecting means 
unresponsive to new subscriber requests to establish connections through the connecting 
means between subscribers, thereby enabling the connecting means to attain a stable state 
with current tasks completed prior to storing the persistent data. 



10 



15 



Conveniently, the system includes managing means for downloading the versions of the 
software to the connecting means and for issuing the instruction in step (c) of the method to 
perform an online switch of software. Preferably, the managing means is operable to 
communicate to the connecting means using messages in Ethernet format. 

Subscribers often employ incompatible formats for their communication traffic. Thus, 
beneficially, the connecting means is operable to interface between Ethernet 
communication traffic and El or Tl pulse code modulated (PCM) communication traffic. 



20 In a practical implementation, the connecting means preferably comprises a plurality of 
connection gateways, each gateway including a host processor and an array of digital signal 
processors (DSPs), the host processor operable to receive routing instructions and to 
allocate connection routes through the signal processors to provide communication paths 
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between subscribers. The host processor and the array are advantageously housed on a 
circuit board in relatively close mutual proximity. 

Advantageously, the host processor in each gateway is operable to handle Ethernet 
5 communication traffic and the DSPs are operable to handle El or Tl format PCM 
communication traffic, the host processor operable to communicate with the DSPs thereby 
providing translation of communication traffic between Ethernet format and El or Tl PCM 
format through the gateway. Allocating Ethernet traffic processing to the host processor 
and PCM processing to the DSPs enables the gateway to cope with high rates of 
10 communication traffic in the order of 12000 packets/second on Ethernet. 

When performing online switching of software, the interfacing software is advantageously 
operable in steps (e) and (f) of the method to maintain communication traffic flow through 
the host processor. The DSPs, on account of their associated software stored therein, 
15 function to maintain existing established connections therethrough unless instructed to do 
otherwise. Thus, the interfacing software is capable of ensuring that established 
connections through the system are uninterrupted when performing the online switching. 

In order to allocate processing load more uniformly in each gateway, the array of each 
20 gateway incorporates its DSPs grouped in rows, each row hardwired to a respective PCM 
communication traffic port of the gateway. 

Advantageously, in order to avoid interrupting execution of the first version of software 



WO 01/84792 PCT/GB01/01912 

6 

when the second version of software is loaded into each gateway, the host processor is 
connected to associated memory means, the second version of software in step (c) being 
loaded into a second part of the memory means so as not to overwrite the first version of 
software residing in a first part of the memory means. 

5 

Likewise, in order to avoid the versions of software stored in each gateway from 
overwriting the persistent data stored therein, the host processor is connected to associated 
memory means for storing in a third part thereof the persistent data in step (d), the third part 
not overwritten when the first and second version of software are loaded into the memory 
10 means. 

In order to ensure that established connections through the connecting means are 
uninterrupted when performing online switching of software, software residing in random 
access memory of the signal processors and controlling operation of the signal processors 
15 remains unupdated in steps (c) to (g) of the method. 

When the system is switched to operating using the second version of software rendering 
the first version obsolete, it is desirable that the first and second versions of software are 
each capable of rendering the connecting means functional in the system when invoked 
20 after a power interruption to the system. 

In order for the version of software executing in the connecting means to determine 
whether or not it is an upgrade or not, the connecting means includes basic operating 
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software stored therein in non-volatile memory, the basic operating software operable to set 
flagging means for enabling the second version of software to determine from the flagging 
means whether it is invoked after a power supply interruption to the system or is invoked 
when performing online switching of software in the system. The flagging means 
5 determines, for example, whether or not the version of software executing proceeds to load 
software into the DSPs; such loading of software into the DSPs is not performed when 
online switching of software occurs otherwise interruption of established connections 
would occur. 

10 In a second aspect of the present invention, there is provided a communication system 
operable according to the aforementioned method of the first aspect of the invention. 

In a third aspect of the present invention, there is provided a connection gateway operable 
according to the aforementioned method of the first aspect of the invention. 

15 

Embodiments of the invention will now be described, by way of example only, with 
reference to the following diagrams in which: 

Figure 1 is a schematic illustration of a communication system incorporating connection 
20 gateways according to the invention; 

Figure 2 is a schematic diagram of a connection gateway according to the invention; 
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Figure 3 is a view of a circuit board layout of the gateway illustrated in Figure 2; and 



Figure 4 is a graphical representation of a process executable in the communication system 
in Figure 1 for switching from a current version of software to a new version of software. 

5 

Communication systems can be configured in, potentially, many alternative ways. Figure 1 
is an illustration of one possible configuration of a communication system according to the 
invention, the system indicated generally by 100. 

10 The system 100 comprises a first subscriber 110, an interconnection network 120 
functioning under internet protocol (IP), and a cluster of connection gateways according to 
the invention shown included within a dotted line 125, the cluster being indicated by 130. 
The gateways in the cluster 130 are mutually identical. Moreover, the system 100 further 
comprises a telephone exchange 170 and a second subscriber 180. 

15 

The network 120 is connected to the first subscriber 110 and to other similar subscribers 
(not shown). Likewise, the exchange 170 is connected to the second subscriber 180 and to 
other similar subscribers (also not shown). The network 120 is connected to the gateways 
by Ethernet links. 

20 

Each connection gateway, for example a gateway 200, comprises two Ethernet ports Pi, P2 
which are each operable to receive or output Ethernet communication traffic at a rate of 100 
Mbits/second. The Ethernet ports Pi, P2 are connected via the network 120 to the 
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management system 160, to the gatekeeper 150, and to the signaling gateway 140. Each 
gateway further comprises four pulse code modulation (PCM) ports Qi, Q 2 , Q3, Q4 which 
are connected to respective PCM connection ports of the telephone exchange 170. 

5 Each connection gateway in the cluster 130 incorporates an associated Motorola 
PowerQuiccII processor. Each PowerQuiccII processor is capable of receiving Ethernet 
instructions via its associated ports Pi, P 2 from the central management system 160 using 
simple network management protocol (SNMP). Likewise, each PowerQuiccII processor 
can respond back to the management system 160 via its associated ports Pi, P 2 , for example 
10 for providing acknowledgements that instructions have been received by the processor. 

Moreover, each PowerQuiccII processor is also capable of receiving Ethernet instructions 
from the gatekeeper 150. The gatekeeper 150 communicates to the processor using media 
gateway control protocol (MGCP). Likewise, each processor can respond back to the 
15 gatekeeper 150 via its associated ports Pi, P 2 . Furthermore, the signaling gateway 140 
connects call signaling to the gatekeeper 150 to enable call control. 

The management system 160 is also connected to other clusters of gateways and their 
associated signaling gateways and gatekeepers (not shown). The gatekeeper 150 is thus 
20 connected to in a range of 300 to 1000 gateways included within the cluster 130, namely a 
parameter "n" in Figure 1 is in a range of 300 to 1000. The management system 160 
thereby is responsible for managing many thousands of connection gateways included in 
the cluster 130 and the other clusters (not shown). 
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Operation of the system 100 connecting the subscribers 110, 180 together will now be 
described with reference to Figure 1. The first subscriber 110 commences by dialing an 
access number for contacting the second subscriber 180. The access number propagates 
from the first subscriber 110 to the network 120 which converts the number into Ethernet 
5 format and then outputs it as an Ethernet formatted access number at its Ethernet ports 
towards the gatekeeper 150. On receipt of the Ethernet formatted number, the gatekeeper 
150 determines which gateway in the cluster 130 is available for providing a 
communication path between the network 120 and the exchange 170. The gatekeeper 150 
then sends an instruction in Ethernet format to the ports Pi, P2 of a gateway, for example to 
10 the gateway 200, to instruct it to provide a communication path from the network 120 to the 
exchange 170 for the call. The instructed gateway then establishes a communication path 
therethrough. The gatekeeper 150 then communicates the access number to the exchange 
170 through the signalling gaiteway 140 which responds by establishing a communication 
path from the exchange 170 to the second subscriber 120. 

15 

When a complete communication path is established between the subscribers 110, 180, the 
first subscriber 110 commences by sending message data, for example digitally sampled 
speech, which is received by the network 120 and converted therein to Ethernet formatted 
message data. The Ethernet formatted data propagates from the network 120 to the 
20 instructed gateway in the cluster 130 at which the message data is converted to 
corresponding message data in PCM format which is then output to the exchange 170. The 
exchange 170 proceeds to transmit the PCM formatted message data to the second 
subscriber 180. 
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The second subscriber 180 also outputs return data for transmission to the first subscriber 
110. The return data propagates from the second subscriber 180 to the exchange 170 
whereat it is translated into return data in PCM format The PCM formatted return data is 
then transmitted onwards to a gateway in the cluster 130 instructed by the gatekeeper 150 
5 to provide a communication path for the PCM return data to the network 120. The 
instructed gateway receives the PCM formatted return data and converts it to corresponding 
Ethernet formatted data which is subsequently output by the instructed gateway at its 
associated Pi, P 2 ports to the-network 120. The network 120 then routes the Ethernet 
formatted data onwards to the subscriber 110. 

10 

The cluster 130 of gateways, the management system 160, the gatekeeper 150 and the 
signaling gateway 140 are thus effective at providing a flexible interface between the 
network 120 and the exchange 170 which operate with mutually different communication 
data formats. Apart from providing communication paths and translating data format, each 
15 gateway in the cluster 130 is capable of performing other functions such as filtration, 
encryption, decryption and error checking. Each gateway is also operable to provide bi- 
directional communication, namely from its Ethernet ports to its PCM ports and also from 
its PCM ports to its Ethernet ports. 

20 When the system 100 is in operation, there is nearly always at least some communication 
traffic data flowing between subscribers connected to the system 100; as a consequence, the 
system 100 is rarely inactive. Such lack of inactivity means that the gateways cannot be 
powered down for software upgrading purposes without interrupting data transmission 
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therethrough. Conventional connection gateways are not capable of being software 
upgraded when in operation without disrupting data traffic transmission therethrough. In 
contrast, the inventors have devised a design of connection gateway and a method of 
operating such a gateway so that software therein is upgradable without interrupting data 
5 transmission through the gateway. In order to further describe the invention and its 
susceptibility to online software upgrades, the connection gateway 200 according to the 
invention will now be described with reference to Figure 2. 

The gateway 200 is housed on a multilayer fibreglass circuit board and includes a number 
10 of principal parts and associated supporting components; the supporting components 
comprise power supply regulators, signal conditioners and line drivers and receivers. Such 
supporting components will be known to one ordinarily skilled in the art of digital circuit 
design. 



15 The principal parts include a PowerQuiccII processor 300, a synchronous dynamic random 
access memory (SDRAM) 310, and a field programmable erasable programmable read only 
memory (FEPROM) 315. The parts further comprise a programmable logic device (PLD) 
signaling handler 320 and an associated array of twenty-four Motorola digital signal 
processors (DSP). The DSPs are indicated generally by 330 and shown included within a 

20 dotted line 340. The gateway 200 further comprises a memory buffer 350, a switch PLD 
360 and a quad PCM termination unit 370 providing four PCM ports Qi, Q 2 , Ck, Q4. In the 
system 100, the ports Qi to Q4 are connected to corresponding PCM ports of the exchange 
170. 
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The processor 300 is a proprietary MCP8260 Motorola device effectively comprising two 
interconnected processors on a silicon chip, namely a first processor capable of executing 
power-PC type machine code, and a second communications control processor designed to 
handle Ethernet communication and associated input/output stacks. The second processor 
5 incorporates hardware that is capable of being configured to handle high-speed data flows, 
namely Ethernet data streams at a rate in the order of 100 Mbits/second. 

Each DSP in the array 330 comprises a proprietary Motorola 563 1 1 digital signal processor 
device incorporating onboard random access memory (RAM). The DSPs are arranged in 
10 four rows, each row comprising six DSPs. Each of the four rows is preferably allocated to 
a corresponding PCM port Qi to Q4. 

The principal parts are connected together as shown in Figure 2. In Figure 2, the Ethernet 
ports Pi, P 2 are connected to corresponding FCC ports of the PowerQuiccII processor 300. 
1 5 The processor 300 is connected via a memory bus to its SDRAM 3 1 0, to its FEPROM 3 1 5 
and to a read only memory (ROM) (not shown). The ROM is programmed with basic start- 
up operating software that the processor 300 executes each time power is initially applied to 
the gateway 200 to bring it into operation. The processor 300 is further connected via a 
local bus to the signaling handler 320. 

20 

The handler 320 is a programmable gate array customized to function as a hardware 
backbone in the gateway 200. The handler 320 includes four communication ports Hi, H 2 , 
H 3 , H4 connected to corresponding rows of DSPs. Moreover, the handler 320 further 
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comprises a port Ki connected to the memory buffer 350. Furthermore, the handler 320 
includes signaling I/FS ports comprising four input ports K2, K3, K4, K5 and four output 
ports K7, Kg, K 9 . The input ports K 2 to K 5 are connected to the switch PLD 360 and 
also to the PCM termination unit 370. Likewise, the ports K* to K9 are connected to the 
5 switch PLD 360. The switch PLD 360 is also connected to ports Di, D 2 , D 3 , D 4 of the 
PowerQuiccII processor 300. 

Referring to Figure 3, there is shown an upper plan view of a circuit board layout of the 
gateway 200, the board indicated generally by 400. The board has an approximate area of 

10 15 cm by 20 cm. Along a lower edge of the board 400, there is incorporated a connector 
410 for the Ethernet ports Pi, P2. A connector 420 for the PCM ports Qi to Q 4 is included 
centrally along the lower edge. The array 330 of DSPs is incorporated on an upper left- 
hand side area of the board 400 shown delineated by a dotted line 420. The DSPs are 
disposed into four rows, each row comprising six DSPs. The handler 320 is situated 

15 towards a right-hand side of the board 400. The SDRAM 310 is included in an upper right- 
hand corner of the board 400. Power regulation components indicated by 430 are 
incorporated in a lower right-hand corner of the board 400. The buffer 350 and the switch 
PDL 360 are included towards a central region of the board 400. 

20 An overview of operation of the gateway 200 in the system 100 will now be described with 
reference to Figures 1 and 2. The gateway 200 is capable of receiving or outputting 
Ethernet traffic at its ports Pi, P2. The traffic can include one or more of the following: 
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(a) communication traffic to or from the network 120; 

(b) MGCP controlling input instructions from the gatekeeper 150 or from the signaling 
gateway 140; or 

(c) SNMP management instructions from the management system 160. 

5 

The PCM traffic flowing between the gateway 200 and the telephone exchange 170 can be 
in either El or Tl format. 

The Tl format employs a data frame structure based on a data rate of 1544 kbits/second as 
10 defined in the ANSI series of standards Tl.lll. The Tl frame structure comprises frames 
where each frame comprises 24 time slots. Each time slot comprises 8 bits of data. Each 
frame further comprises an associated frame synchronisation "F" bit outside the time slots 
at the start of each frame indicating frame synchronisation. In addition, a multi-frame 
synchronisation signal is present for identifying the start of a multi-frame comprising 24 
15 frames; such a signal is defined in International Telecommunication Union 
recommendation ITU-T G.704 . 

The El format employs a data frame structure based on a data rate of 2048 kbits/second. 
The El frame structure comprises 32 time slots, each slot including 8 bits of data; the slots 
20 are numbered from slot 0 through to slot 31. Slot 0 is used for frame synchronisation. 
Moreover, slot 16 is used for SS7 signaling inforniation as defined in recommendation 
ITU-T Q.703. Slots 1 to 15 are allocated to corresponding communication channels 1 to 
15. Likewise, slots 17 to 31 are allocated to corresponding communication channels 16 to 
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30. Thus, El format PCM communication traffic can convey information corresponding to 
30 communication channels. On account of the gateway 200 including the four PCM 
outputs Qi to Q4, the gateway 200 can route any of the channels to the PCM outputs; the 
gateway 200 is thereby capable of providing 120 possible connection paths therethrough. 

5 

The PowerQuiccH processor 300 interprets communication traffic entering at its associated 
Ethernet ports Pi, P2 and strips out communication traffic from instructions from the 
management system 160, or from the gatekeeper 150. The first processor in the 
PowerQuiccII processor 300 interprets the instructions and responds in a number of ways, 
10 for example: 



(a) it configures the handler 320 and the DSPs to route channels in a particular manner 
through the gateway 200, for example channels 1 to 5 from Ethernet traffic provided at 
the port Pi to the PCM port Q3 and apply encryption to the traffic; 
15 (b) it compiles a response message and sends it via one or more of the ports Pi, P2 back to 
the management system 160, or to the gatekeeper 150, for example audit responses; or 

(c) it loads data or software into specified memory areas of the gateway 200, for example 
into the SDRAM 3 10 or RAM associated with the DSPs. 

20 The gateway 200 can be configured such that Ethernet communication traffic entering at its 
ports Pi, P2 is directed through the second communications control processor of the 
PowerQuiccH processor 300 and then but through the local bus to the handler 320 which 
outputs the traffic to the buffer 350. The traffic stored in the buffer 350 is subsequently 
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output therefrom through the handler 320 again to one or more allocated DSPs in the array 
330 which processes the traffic in a manner directed by the gatekeeper 150. When the 
traffic has been processed in the array 330, it is then output from one or more of the ports 
K6 to K 9 of the handler 320 to the switching PLD 360 and further therefrom on to the 
5 termination unit 370. The unit 370 conditions the processed traffic for output at one or more 
of its PCM ports Qi to Q 4 . 

The gateway 200 can also be configured such that PCM communication traffic entering the 
PCM ports Qi to Q4 is routed and processed in the gateway 200 depending on instructions 

10 from the management system 160, from the gatekeeper 150 or from the signaling gateway 
140. For example, PCM communication traffic can be routed through the handler 320 to 
selected DSPs in the array 330 for processing. Corresponding processed traffic from the 
selected DSPs can then be routed through the handler 320 and its associated buffer 350 and 
eventually therefrom to the second communication control processor of the PowerQuiccII 

15 processor 300 for output therefrom as Ethernet traffic at one or more of its Ethernet ports 
Pi,P2. 

Thus, the gateway 300 can be configured to support bi-directional communication and 
processing therethrough. 

20 

The inventors have appreciated that software loaded from the management system 160 into 
connection gateways of the system 100 needs to be updated at intervals for a number of 
reasons. Such reasons include, for example, adding further clusters or changing a manner 
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in which PowerQuiccII processors in the gateways process Ethernet traffic received from 
the network 120. It is highly desirable that software can be downloaded from the 
management system 160 into the connection gateways without interrupting communication 
traffic flowing between the network 120 and the exchange 170. The inventors have 4evised 
5 a method of operating the system 100 and its associated connection gateways to achieve 
such updating. 

In overview, the method involves the inventors incorporating the following features into the 
design of the connection gateways, the features comprising: 

10 

(a) partitioning the SDRAM 310 into three parts, a first part for storage of current 
operating software, a second part for storage of new operating software to be executed 
in substitution for the current software, and a third part for storing persistent data 
corresponding to status of the gateway and its connection relationship to the system 

15 100; and 

(b) including a special software object, namely a Mini Media Handler (MMH), into the 
current and new operating software stored in the SDRAM 310, the MMH invokable 
when transferring gateway operation from one version of operating software to 
another. 

20 

The MMH has a special characteristic that it can maintain operation of its associated 
connection gateway when a transition from the current software to the new software occurs. 
Moreover, the MMH does not require support of routines included within the current or 
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new software to keep its associated gateway functional; thus, the MMH can continue 
functioning even if its associated operating software has ceased execution. 

Operation of the system 100 downloading a current version of operating software into its 
5 connection gateways and then upgrading the current version of software to a new version 
will now be described with reference to Figures 1 and 2. 

Initially when power is applied to the network 100, none of the connection gateways in the 
cluster 130 have operating software loaded thereinto; each of them only includes the 
10 aforementioned start-up operating software stored in associated on-board ROM. Initially, 
by executing the start-up software, the PowerQuiccII processor 300 in each gateway 
outputs data at its associated Ethernet ports Pi, P 2 making its presence in the system 100 
known to the management system 160. Similarly, the gatekeeper 150 and the signaling 
gateway output data to make their presence known to the management system 160. 

15 

The system 160 proceeds to load operating software into the gatekeeper 150 and into the 
signaling gateway 140. The management system 160 further proceeds to issue a current 
version of operating software to each of the gateways in the cluster 130 via their associated 
Ethernet ports Pi, P2. The current operating software is loaded into a first part of the 
20 SDRAM 310 of each gateway in the cluster 130. In each gateway, a portion of the 
operating software is then transferred from its associated PowerQuiccII processor 300 into 
RAM associated with each of its associated DSPs in the array 330. Each DSP has mutually 
identical software loaded into its associated RAM; however, if specifically necessary, each 
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gateway in the cluster 130 is capable of being programmed so that its DSPs can be loaded 
with mutually different software although this is not a usual mode of operation. Software 
loaded into the DSPs is designed to enable the DSPs to interface to the handler 320 and to 
perform a range of signal processing functions, for example signal filtration, reformatting, 
5 encryption, decryption, compression and decompression functions. Conversely, software 
residing in the first part of the SDRAM 310 is for execution in the PowerQuiccH processor 
300 of each connection gateway and is operable to interface the processor 300 to the 
management system 160, to the gatekeeper 150, to the signaling gateway 140 and enable 
the processor 300 to interpret commands and configure and connect its associated DSPs to 
10 perform desired routing and processing functions. 

The software residing in the first part of the SDRAM of each gateway in the cluster 130 
also includes the special software object, namely the Mini Media Handler (MMH). The 
MMH is normally inactive and is only activated by the PowerQuiccH processor 300 on 
15 special command from the operating system 1 60 when an online software switch is about to 
be performed. 

When the current operating software has been loaded into the gateways in the cluster 130 
and also into the gatekeeper 150 and the signaling gateway 140, the management system 
20 160 then issues a command for the system 100 to commence operation. The system 100 
then functions as described earlier in overview. 

When the system 100 has been operational for a period of time, for example several weeks 
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or months, a considerable amount of communication traffic corresponding to calls between 
subscribers will be flowing through the system 100; for example, it is not unusual for 
10000 calls to be simultaneously interfaced through the cluster 130 when it comprises 1000 
connection gateways, each gateway providing 120 potential connections when working 
5 with El format communication traffic. Often, the data flow can be relatively constant and 
periods where the system 100 is in a quiet state do not occur predictably. 

The? inventors have appreciated that it is not practicable simply to switch off the system 100 
and load new software into it when software upgrades are required because this will cancel 
10 all call connections in the system 100 and will appear as unreliability to subscribers. If use 
of the system 100 is sold to subscribers on the basis of reliability of connection, simply 
switching off the system 100 momentarily for software upgrading purposes can have 
serious financial consequences regarding customer billings and therefore revenue derived 
from the system 100. 

15 

The gateways in the cluster 130 have therefore been designed to be capable of having their 
software upgraded without disturbing established calls routed through the system 100. In 
overview, a software switching process is invoked on command from the management 
system 160 when the current version of software being executing in the cluster 130 is to be 
20 replaced by a new version of software. The process is illustrated in Figure 4. 

In Figure 4, there is a graphical representation of a online software switching process 
executable in the communication system 100 for switching from a current version of 
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operating software to a new version of operating software, the process being represented by 
a graph indicated by 500; in Figure 4, "Version 1" and "Version 2" correspond to the 
current and new versions of operating software respectively. The graph 500 includes an 
abscissas axis 510 denoting time elapsed from left to right. Moreover, the graph 500 
5 further includes an ordinate axis 520 on which is indicated various items of software. 

At a time to, power is applied to the system 100 which initially starts up; the basic start-up 
software in the connection gateways causes them to announce their inclusion in the system 
100 via Ethernet to the management system 160. Moreover, the basic software also sets a 

10 flag F s in the SDRAM 3 10 of each connection gateway to record that no previous versions 
of operating software have yet been loaded into the gateway. After the time to, the 
management system 160 loads a current version of operating software into each of the 
connection gateways in the cluster 130. As described earlier, the current version of 
operating software is loaded into a first part of the SDRAM 310 in each connection 

15 gateway. Each connection gateway then proceeds to download from its SDRAM 310 via 
its PowerQuiccII processor 300 part of the current version of operating software into RAM 
of each of its associated DSPs. The management system 160 then issues an instruction for 
the system 100 to commence operation to convey communication traffic. The current 
version of software when executing in each connection gateway initially checks the flag F s . 

20 The flag F s is in an unset state as a consequence of action of the basic software; the current 
version of software identifies from the state of the flag F s that it is not a software upgrade. 

At a time ti, for example several months after the time to, its operator instructs the 
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management system 160 that a software update is required in the system 100. The 
management system 160 proceeds in response to retrieve from its memory a new version of 
operating software, and then issues an instruction to the connection gateways in the cluster 
130 to prime them to receive the new software. The gateways in the cluster 130 then 
5 receive from the management system 160 via their Ethernet ports Pi, P2 the new version of 
software which they each store in a second part of their SDRAM 310, thereby not 
overwriting the current version of software stored in the first part of their SDRAM 310. 
Whilst the new version of software is being downloaded into the gateways, the gateways 
continue to function by executing their current version of software. At a time t2, the 
10 management system 160 has completed downloading the new version of software into the 
connection gateways. 

At a time t3, the management system 160 issues a command to the connection gateways in 
the cluster 130 to perform an online switch to executing the new version of software. This 

15 instruction causes each connection gateway executing the current version of software to 
execute a switchover routine. When executing the switchover routine, each gateway 
ignores further instructions from the management system 160, or from the gatekeeper 150; 
the current version of the software invokes its MMH. As aforementioned, the MMH is a 
special software object which can keep its associated gateway functioning without invoking 

20 operating system routines included in the current version of operating software. Moreover, 
each gateway sets its flag F s to a set state indicative x>f operating software having already 
been executed in the gateway after the time t 0 . Each gateway then proceeds to wait until its 
present tasks are concluded, for example subscribers connected thereto have completed 
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their number dialing sequences or have hung up, rendering the gateway in a stable state. 
When each gateway has attained a stable state, it stores its persistent data describing its 
current state in a third part of its SDRAM 310. Persistent data will be described more fully 
later. 

5 

At a time when the connection gateways have stored their associated persistent data, the 
current version of software ceases executing leaving only the MMH executing. 

At a time t 5 , the MMH invokes the new version of operating software. The MMH and the 
10 new version are executed concurrently in a period between the time ts and a later time te, 
although during this period the new version does not implement any new connections 
through the DSPs of its gateway. The new version first checks the flag F s to determine 
therefrom whether or not the new version has been invoked as an upgrade or whether or not 
it has been invoked following a power down of the system 100; the flag F s was set as 
15 described above hence the new version determines therefrom that it is an upgrade. The new 
version then proceeds to retrieve the persistent data from its associated SDRAM 310 and 
load it into a random access memory on its processor 300. If the flag Fs were not set, the 
new version would interpret therefrom that it was not an upgrade and would not need to 
search for persistent data. 

20 

After retrieving the persistent data and setting its working parameters into accordance with 
the persistent data, the new version of software then at the time t$ terminates execution of 
the MMH provided in the current version of software and assumes control of the gateway. 
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At this stage, each connection gateway is fully under the control of its new version of 
software and can again receive instructions from the management system 160, and from the 
gatekeeper 150. The time t 6 signifies the end of the process for online switching of 
software in the connection gateways. 

5 

During the online switching process, software in the DSPs is not upgraded; doing so would 
potentially interrupt established communication paths through the cluster 130. Moreover, 
the new version of software, in similarity to the current version, is capable of operating the 
cluster 130 in the event of the system 100 being powered down and then restarted using the 

10 new software; thus, the new version of software includes its own MMH so that a 
switchover to other software from the new version of software can also be, made if 
subsequently required. The process even allows reversion from the new version of 
software to the current version in case the new version of software is found to be defective 
" when executed in the system 100, for example if it includes a software bug which only 

15 becomes apparent on live execution of the new version of software in the system 100. Such 
reversion to the current version of software also uses the process as shown in Figure 4 
except that "Version 1" and "Version 2" become the new version of software and the 
current version of software respectively, the MMH being invoked corresponding to the one 
included in the new version of software. 

20 

In the process represented in Figure 4, waiting for each gateway to reach a stable state 
before storing its persistent data simplifies greatly the complexity of the persistent data and 
also simplifies tasks which the new version of software has to perform in a duration 
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between the times t 5 and ^ If each gateway is not permitted to reach a stable state, the size 
of the persistent data is considerably enlarged because it then has to include parameters 
describing instantaneous status of tasks being executed by the current version of software 
rather than end states of completed tasks. In practice, the persistent data has a size in the 
5 order of 1 00 kbytes when only end states are recorded therein. , 

Partitioning the SDRAM 310 of each gateway into first, second and third parts is governed 
by memory parameters allocated to the versions of software; the SDRAM 310 is a 
continuous memory without distinct hardwired separate regions. The current and new 
10 versions of software are stored in the mutually different first and second parts of the 
SDRAM 310 and the persistent data is stored in the third part of the SDRAM 310 which is 
not overwritten when the new version of software is loaded from the management system 
160. 

15 If the new version of software is invoked in the system 100 immediately after power being 
reapplied after a power supply interruption, the new version of software checks the flags F s 
in each of the connection gateways and will proceed to load software received from the 
management system 160 to RAM of the DSPs in the event that the flags F s are set to record 
that no earlier versions of operating software have been executed after power up. 

20 

Persistent data stored in the SDRAM 3 10 of each connection gateway can provide a record 
of the following parameters: 
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(b) 



(a) 



a current configuration of the gateway, for example whether its ports Qi, Q2, Q3, Q4 

are operable to receive El or Tl formatted communication traffic; 

configuration data relating to where the gateway is included in the system 100 and* to 



what it is connected; 



5 (c) licensing data relating to subscribers and users of the system 100; 

(d) details of all established connections through the DSPs between the PCM ports Qi to 
Q 4 and the ports Pi, P 2 , for example which DSP is handling a particular connection 
through the gateway and the filtration, encryption, decryption, data compression and 
reformatting functions that the DSP is configured to perform; and 

10 (e) states of software objects running in the PowerQuiccH processor 300 just prior to 
storing the persistent data. 

The Mini Media Handler will now be described in further detail. Unless the DSPs in the 
connection gateways are instructed to terminate processing functions allocated to them, 

15 they will continue to perform their appointed functions; thus, in order to maintain present 
operation of the DSPs, the MMH does not need to issue new instructions to the DSPs. 
Moreover, the second communications control processor in each PowerQuiccH processor 
300 includes a number of data registers which determine routing of Ethernet data through 
its associated PowerQuiccII processor 300 into its associated buffer 350. It is the 

20 responsibility of the MMH to ensure that these registers are correctly set and that 
communication traffic flows between the ports Pi, Pi and the DSPs via the buffer 350 and 
the handler 320. The MMH also has to be capable of handling a software call at the time t4 
from the current version of software invoking MMH operation and also be capable of 
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passing software control of the gateway over to the new version of operating software when 
demanded by the new version at the time ts. As described earlier, the MMH has to be 
capable of performing these operations without support from the current and new versions 
of software. 

5 

In practice, the process of online software switching represented in Figure 4 is relatively 
rapid; for example, only seconds of time are required for loading the new version of 
software to the connection gateways in a period of ti to t2, waiting for a stable state and 
storing persistent data in a period of t3 to U takes up to seconds because events such as 

1 0 dialing are timed out if not completed within seconds, and MMH execution in a period of U 
and t6 lasts in a range of seconds. Transition from executing the current version of software 
to executing the MMH at the time U occurs within a period which is in the order of time 
jitter typically observed in Ethernet communication traffic provided from the network 120. 
Likewise, transition from the MMH to the new version of software at the time U is similarly 

15 also in the order of time jitter normally observed in the system 100. As a consequence, 
switchover from the current version to the new version of software is virtually undetectable 
by the system 100 except that the connection gateways will appear to be unresponsive to 
new call requests from the gatekeeper 150 when attempting to reach a stable state just prior 
to the time ty, such unresponsiveness does not correspond to interruption of established 

20 connections through the system 100 as would occur in prior art communication systems 
when performing software upgrades. Thus, operating the system 100 as described above 
enables the gateways to be updated with new software online without interrupting operation 
of the system 100. 
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Table 1 provides a tabulated list of events of the online software switching process 
represented graphically in Figure 4. . 



TABLE 1 



STEP 


TIME 


OPERATION 


1 


to 


Power is applied to the system 100 


2 




Execution of the basic operating software is commenced in the connection gateways (from 
ROM), in the signaling gateway 140, in the gatekeeper 150 causing them to announce via 
Ethernet their existence in the system 100 to the management system 160 


3 




The flag F, in each connection gateway is set to record that no previous version of operating 
software has been loaded since step 1 


4 




Operating software is downloaded from the management system 160 into the gatekeeper 150, 
into the signaling gateway 140 and into the first part of the SDRAM 310 of each of the 
connection gateways in the cluster 130 


5 




Each connection gateway loads software into its associated DSPs 


6 




The management system 1 60 issues to the system 100 an instruction to commence operation 


7 




The current version of operating software in each connection gateway checks the status of its 
associated flag F t and then continues to bring the gateway into operation 


8 


ti 


The management system 160 issues an instruction that the new version of software is about to be 
downloaded 


9 


k 


The new version of software is downloaded from the management system 160 into the second 
part of the SDRAM 3 10 of each connection gateway 


10 


t 3 


The management system 160 issues a command to the connection gateways to switch over to 
executing the new version of software 


11 




The connection gateways restrict their SNMP command interpretation to providing audits only, 
namely status reports back to the gatekeeper 1 50 


12 




The connection gateways restrict their MGCP command interpretation to providing audits only, 
namely status reports back to the gatekeeper 150 


13 




Each connection gateway sets its associated flag F, to record that the current version of software 
has been executed after the time to 


14 




Each gateway completes its present tasks without responding to new requests from the 
gatekeeper 150, from the signaling gateway 140 or from the management system 160; each 
gateway thereby attaining a stable state 


15 




Each connection gateway stores its persistent data corresponding to its stable state in a third part 
of its SDRAM 310 


16 


U 


Each connection gateway invokes its MMH software and execution of the current version of 
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software is then terminated 


17 


ts 


The new version of software commences execution in each gateway concurrently with the MMH 
software, but full control of the connection gateway is not yet passed to the new version 


18 




In each connection gateway, the new version of software checks its flag F s to determine whether 
the new version is an upgrade or invoked in an initial powering up of the system 100 


19 




In each connection gateway, the new version of software leaves the DSPs, the handler 320 and 
the PowerQuiccII processor 300 SNMP (Ethernet) in their presently established state if the flag 
F s is set to indicate mat the new version is an update 


20 




In each connection gateway, the new version of software performs a "sanity check" to ensure 
that loss of connection gateway functionality will not occur when the new version of software 
assumes full gateway control; if there is a problem, control remains with the MMH and a report 
is sent back via Ethernet SNMP to the management system 160 


21 




In each connection gateway, the MMH passes full gateway control to the new version of 
software; execution of the MMH software is terminated simultaneously with the new version 
assuming full control 


22 




In each connection gateway, the PowerQuiccII processor 300 is rendered by the new software 
fully responsive again to SNMP and MGCP communications received at its associated P b P 2 
Ethernet ports 



It will be appreciated that modifications can be made to the system 100 without departing 
from the scope of the invention. For example, the DSPs and the PowerQuiccII devices can 
be replaced by alternative proprietary devices providing similar general data processing and 
5 interpretation functions respectively. The PLD handler 320 can be replaced with other 
semiconductor devices capable of providing an interface between the processor 300 and the 
DSPs. 

Moreover, the current and new versions of software can be structured in a number of 
10 alternative ways to control each gateway. Thus, the current and new versions of software 
can be substituted with alternative versions provided that: 

(a) the alternative versions can control their associated connection gateways; and 
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(b) gateway operation can be transferred between the alternative versions of software by 
invoking intermediary software, namely the MMH software, and using persistent data 
storage to record status of the connection gateways at switchover from one version of 
the software to another. 

Other methods of online software updating can be used for upgrading software loaded into 
the gatekeeper 150 and also into the DSPs of each connection gateway; for example, DSPs 
can have loaded thereinto software upgrades when they are not actively providing 
communication connections therethrough. 
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CLAIMS 

1. A method of performing online switching of software from executing a first version 
of operating software to executing a second version of operating software in a 
communication system (100), the system (100) incorporating connecting means (130, 140, 
150) controllable using the software for routing and processing communication traffic 
flowing between subscribers (110, 180) connected to the system (100) in response to 
subscriber demand, the method characterised in that it includes the steps of: 

(a) providing the system (100) with its connecting means (130) executing the first 
version of the software; 

(b) receiving the second version of software at the connecting means (130); 

(c) receiving an instruction at the connecting means (130) to perform an online switch 
of software; 

(d) storing persistent data describing at least routing connections established through 
the connecting means; 

(e) transferring control of the connecting means (130) from the first version of software 
to interfacing software (MMH) executing in the connecting means (130) and 
operable to maintain established routing connections through the connecting means 
(130); 

(f) executing the second version of software concurrently with the interfacing software 
(MMH) to enabling the second version to recover the persistent data and configure 
itself in response thereto; and 
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(g) passing control of the connecting means from the interfacing software to the second 
version of software. 

2. A method according to Claim 1 wherein the interfacing software is included in the 
first version of software, the interfacing software (MMH) operable to control the 
connecting means (130) without support from other parts of the first version of software. 

3. A method according to Claim 1 or 2 wherein the persistent data includes one or 
more of. 

(a) a record of the state of the connecting means (130) at an instance when the 
persistent data is stored; 

(b) a record of the manner in which the connecting means (130, 140, 150) is included 
into the system (100, 120, 170); 

(c) licensing data relating to subscribers (110, 180) and users of the system; 

(d) a record of all established connections and associated processing functions through 
the connecting means (130); and 

(e) states of software objects ranning in the connecting means (130) when the persistent 
data is stored. 

4. A method according to Claim 1, 2 or 3 wherein, after step (c), the first version of 
software is operable to render the connecting means (130) unresponsive to new subscriber 
requests to establish connections through the connecting means (130) between subscribers 
(1 10, 180), thereby enabling the connecting means (130) to attain a stable state with current 
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tasks completed prior to storing the persistent data. 

5. A method according to Claim 1, 2, 3 or 4 wherein the system (100) includes 
managing means (160) for downloading the versions of the software to the connecting 
means (130) and for issuing the instruction in step (c) to perform an online switch of 
software. 

6. A method according to Claim 5 wherein the managing means (160) is operable to 
communicate to the connecting means using messages in Ethernet format. 

7. A method according to Claim 6 wherein the managing means employs SNMP 
protocol to communicate to the connecting means (130). 

8. A method according to any preceding claim wherein the connecting means (130) is 
operable to interface between Ethernet communication traffic and El or Tl format pulse 
code modulated (PCM) communication traffic. 

9. A method according to any preceding claim wherein the connecting means (130) 
comprises a plurality of connection gateways (200), each gateway (200) including a host 
processor (300) and an array (330) of digital signal processors (DSPs), the host processor 
operable to receive routing instructions and to allocate connection routes through the signal 
processors to provide communication paths between subscribers (1 10, 1 80). 
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10. A method according to Claim 9 wherein the host processor (300) in each gateway 
(200) is operable to handle Ethernet format communication traffic and the DSPs are 
operable to handle PCM communication traffic, the host processor (300) operable to 
communicate with the DSPs thereby providing translation of communication traffic 
between Ethernet format (P h P 2 ) and PCM El or Tl format (Qi, Q 2 , Qa, Q4) through the 
gateway. 

11. A method according Claim 9 or 10 wherein the interfacing software is operable in 
steps (e) and (f) to maintain Ethernet communication traffic flow through the host processor 
(300). 

12. A method according to Claim 9, 10 or 1 1 wherein the array (330) of each gateway 
incorporates its DSPs grouped in rows, each row hardwired to a respective PCM 
communication traffic port (Qi, Q 2 , Q3, Q4) of the gateway. 

13. A method according to Claim 9, 10, 11 or 12 wherein the host processor (300) is 
connected to associated memory means (310), the second version of software in step (c) 
loaded into a second part of the memory means so as not to overwrite the first version of 
software residing in a first part of the memory means (3 1 0). 

14. A method according to any one of Claims 9 to 13 wherein the host processor (300) 
is connected to associated memory means (310) for storing in a third part thereof the 
persistent data in step (d), the third part not overwritten when the first and second versions 
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of software are loaded into the memory means (310). 

15. A method according to any one of Claims 9 to 14 wherein software residing in 
random access memory of the signal processors and controlling operation of the signal 
processors remains unupdated in steps (c) to (g). 

16. A method according to any preceding claim wherein the first and second versions of 
software are both operable to tender the connecting means (130) functional in the system 
(100) when invoked after a power interruption to the system (100). 

17. A method according to any preceding claim wherein the connecting means (130) 
includes basic operating software stored therein in non-volatile memory, the basic operating 
software operable to set flagging means (F s ) for enabling the second version of software to 
determine from the flagging means (F s ) whether it is invoked after a power supply 
interruption to the system (100) or is invoked when performing online switching of 
software in the system (100). 

18. A communication system (100) operable according to a method as claimed in any 
preceding claim. 

19. A connection gateway (200) operable according to a method as claimed in any one 
of Claims 1 to 17. 
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